Not a reference per se, but I've noticed that several companies are now explicit that they're doing this. Chase's standard "This call may be monitored or recorded" has morphed into something like "This call may be monitored or recorded, and used for identification purposes", and Schwab has you repeat the phrase "At Schwab, my voice is my password" before they let you talk to a rep.